GitHub

Records179All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high80CVSS 7.0–8.9

Exploited now

GitHub records in CISA KEV

No GitHub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Enterprise Server 126 records HIGH Cmark-gfm 10 records HIGH Github 9 records MEDIUM Cli 3 records MEDIUM 491-project 1 record MEDIUM Actions/artifact 1 record MEDIUM Actions Toolkit 1 record MEDIUM Codeql Action 1 record LOW

Records

1 record in Actions/artifact · all components

TI-2024-28439 CVE-2024-42471 · GHSA-6q32-hq47-5qq3

Arbitrary File Write via artifact extraction in actions/artifact

MEDIUM 45

actions/artifact is the GitHub ToolKit for developing GitHub Actions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03219 Published 2024-09-02 Fixed in 2.1.2 CWE-22

Open these records in search →